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DETAILED ACTION 

1. Claims 1-12, and 14-20 are pending in this application. 

Claim Rejections - 35 USC § 103 

2. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

a. (a) A patent may not be obtained though the invention is not identically disclosed or described 
as set forth in section 102 of this title, if the differences between the subject matter sought to be 
patented and the prior art are such that the subject matter as a whole would have been obvious at the 
time the invention was made to a person having ordinary skill in the art to which said subject matter 
pertains. Patentability shall not be negatived by the manner in which the invention was made. 

3. Claims 1, 2, 9-12, 15-16 and 18, are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Paya et al (US Pub # 2004/0181598 A1, hereinafter 
Paya) in view of Malik (US Patent # 7,269,624 B1, hereinafter Malik) and in 
further view of Saito et al (US Pub # 2001/0044894, hereinafter Saito). 

4. With respect to claim 1 , Paya discloses creating a unique customer 
identification for a user of the customer device ([0008], lines 6-18); storing the unique 
customer identification on the first server ([0008], lines 6-18); communicating the 
unique customer identification to ([0008], lines 6-18), a client running the client 
application ([0007]); wherein the communication does not include a cookie sent to a 
browser ([0007]). Storing the unique customer identification on the client ([0010], lines 
6-18); communicating the unique customer identification from the client to the first 
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server or one of the other servers ([0008], lines 1 -1 8); and authenticating the user by 
matching the unique customer identification received at the first server or one of the 
other servers with the unique customer identification stored on the first server or one 
of the other servers ([0008], lines 1-18), but does not clearly disclose a method for 
computer network access comprising the steps of: running a client application 
wherein, the client application is not a web browser, and the client application runs on 
a customer device; entering user information into the customer device; 
communicating the entered user information to a first server; storing the user 
information on the first server, communicating the unique customer identification to 
other servers running a plurality of server applications, and storing the unique 
customer identification on the client and the other servers. 

In the same field of endeavor, Malik discloses a method for computer network 
access comprising the steps of: running a client application wherein (col. 5, lines 10-25), 
the client application is not a web browser (col. 5, lines 10-25), and the client application 
runs on a customer device (col. 5, lines 10-25); entering user information into the 
customer device (col. 5, lines 10-25); communicating the entered user information to a 
first server (col. 5, lines 10-25); storing the user information on the first server (col. 5, 
lines 10-25), authenticating the user by matching the unique customer identification 
received at the first server or one of the other servers with the unique customer 
identification stored on the first server or one of the other servers (col. 5, lines 59-67, 
col. 6, lines 1-22). 
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Malik and Paya are analogous art since they both are both of class 709 and both 
disclose managing communication sessions. Therefore, it would have been obvious to 
a person of ordinary skill in the art at the time the invention was made to incorporate the 
teachings of Paya with the teachings of Malik whom disclose saving entered user 
information on a server and authorizing the entered information with the client in order 
to be able to directly provide instructions to the source server through e-mail messages 
and various modules. One of ordinary skill in the art would have been motivated to 
incorporate the teachings so it can be easily implemented on any network since only the 
email server needs to be modified. 

However, Malik and Paya do not clearly disclose communicating the unique 
customer identification to other servers running a plurality of server applications, and 
storing the unique customer identification on the client and the other servers. 

In the same field of endeavor, Saito discloses communicating the unique 
customer identification to other servers running a plurality of server applications 
([0104]), and storing the unique customer identification on the client and the other 
servers ([0104], when any computer/server receives information, it has to store it at 
least temporarily in order to analyze the information). 

Malik, Paya, and Saito are analogous art since Malik, Paya, and Saito all 
disclose identifying a client/user. It would have been obvious to one of ordinary skill in 
the art at the time the invention was made to combine the teachings of Paya and Malik 
with the teachings of Saito whom disclose distributing unique identifications to other 
servers in order to be able to incorporate a user having different combinations of user 
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ID's and passwords or certificates for a plurality of kinds of services processed by the 
plurality of application servers. One of ordinary skill would have been motivated to 
combine these teachings in order for a more efficient use of user and password by 
utilizing a single-sign-on feature. 

5. With respect to claim 2, it is rejected for the same reasons as claim 1 above. 
In addition, Malik discloses in the step of authenticating the user by matching the 
unique customer identification, the first server and each of the other servers has a 
particular service available to the user of the customer device and the user of the 
customer device is not allowed access to the particular service if the unique customer 
identification received at the does not match the stored unique customer 
identification (col. 5, lines 59-67, col. 6, lines 1-22). 

6. With respect to claims 9 and 10, Paya discloses creating a unique customer 
identification for a user of the customer device ([0008], lines 6-18); storing the unique 
customer identification on the first server ([0008], lines 6-18); communicating the 
unique customer identification to ([0008], lines 6-18), a client running the client 
application ([0007]), and other servers running a plurality of server applications 
([0007]); wherein the communication does not include a cookie sent to a browser 
([0007]). Storing the unique customer identification on the client and the other servers 
([0010], lines 6-18); communicating the unique customer identification from the client 
to the first server or one of the other servers ([0008], lines 1 -1 8); and authenticating 
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the user by matching the unique customer identification received at the first server or 
one of the other servers with the unique customer identification stored on the first 
server or one of the other servers ([0008], lines 1-18) but does not clearly disclose a 
digital computer system and a computer-readable medium storing a computer 
program, programmed to perform the following steps: run a client application wherein, 
the client application is not a web browser, and the client application runs on a 
customer device; entering user information into the customer device; communicating 
the entered user information to a first server; storing the user information on the first 
server and wherein each of the other servers has a particular service available to the 
user of the customer device and wherein the user of the customer device is not 
allowed access to the services the unique customer identification received at the first 
server or one of the other servers does not match the unique customer identification 
stored on the first server or one of the other servers. 

In the same field of endeavor, Malik discloses a digital computer system and a 
computer-readable medium storing a computer program, programmed to perform the 
following steps: run a client application wherein (col. 5, lines 10-25), the client 
application is not a web browser (col. 5, lines 10-25), and the client application runs on 
a customer device (col. 5, lines 10-25); entering user information into the customer 
device (col. 5, lines 10-25); communicating the entered user information to a first server 
(col. 5, lines 10-25); storing the user information on the first serer(col. 5, lines 10-25) 
and wherein each of the other servers has a particular service available to the user of 
the customer device and wherein the user of the customer device is not allowed access 
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to the services the unique customer identification received at the first server or one of 
the other servers does not match the unique customer identification stored on the first 
server or one of the other servers (col. 5, lines 59-67, col. 6, lines 1 -22), 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to incorporate the teachings of Paya with the teachings 
of Malik whom disclose a communication through e-mail networks in order to be able to 
directly provide instructions to the source server through e-mail messages and various 
modules. One of ordinary skill would have been motivate to do incorporate these 
teachings so it can be easily implemented on any network since only the email server 
needs to be modified. 

7. With respect to claim 1 1 , Paya discloses a server computer running a server 
software application operable for creating a unique identification for a user ([0008], 
lines 6-18, store the unique identification on the server computer ([0008], lines 6-18), 
communicate the unique customer identification to a client, wherein the 
communication does not include a cookie sent to a browser ([0007]); and authenticate 
the user via the unique identification when the user communicates with the server 
computer ([0008], lines 1-18) but does not clearly disclose client computer running a 
client software application, said client computer operably connected to the server 
computer over a network and wherein the client software application is operable to: 
communicate user information to the server application, store the unique customer 
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identification, and provide the server with the unique customer identification to 
authenticate a user with the server application; and at least one additional server 
computer running an additional server software application, said additional server 
computer operably connected to the server computer and client computer over a 
network and operable for providing information services to a user, receiving the 
unique user identification from the server computer and authenticating the user via 
the unique identification when the user communicates with the additional server 
software application. 

In the same field of endeavor, Malik discloses client computer running a client 
software application, said client computer operably connected to the server computer 
over a network and wherein the client software application is operable to: communicate 
user information to the server application (col. 5, lines 10-25), store the unique customer 
identification (col. 5, lines 10-25), and provide the server with the unique customer 
identification to authenticate a user with the server application (col. 5, lines 10-25). 
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Malik and Paya are analogous art since they both are both of class 709 and both 
disclose managing communication sessions. Therefore, it would have been obvious to 
a person of ordinary skill in the art at the time the invention was made to incorporate the 
teachings of Paya with the teachings of Malik whom disclose a communication through 
e-mail networks in order to be able to directly provide instructions to the source server 
through e-mail messages and various modules. One of ordinary skill in the art would 
have been motivated to combine the teachings so it can be easily implemented on any 
network since only the email server needs to be modified. 

However, Malik and Paya do not clearly disclose at least one additional server 
computer running an additional server software application, said additional server 
computer operably connected to the server computer and client computer over a 
network and operable for providing information services to a user, receiving the unique 
user identification from the server computer and authenticating the user via the unique 
identification when the user communicates with the additional server software 
application. 

In the same field of endeavor, Saito discloses disclose at least one additional 
server computer running an additional server software application, said additional server 
computer operably connected to the server computer and client computer over a 
network and operable for providing information services to a user ([0104]), receiving the 
unique user identification from the server computer and authenticating the user via the 
unique identification when the user communicates with the additional server software 
application ([0104]). 
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Malik, Paya, and Saito are analogous art since Malik, Paya, and Saito all 
disclose identifying a client/user. It would have been obvious to one of ordinary skill in 
the art at the time the invention was made to incorporate the teachings of Paya and 
Malik with the teachings of Saito whom disclose distributing unique identifications to 
other servers in order to be able to incorporate a user having different combinations of 
user ID's and passwords or certificates for a plurality of kinds of services processed by 
the plurality of application servers. One of ordinary skill would have been motivated to 
combine these teachings in order for a more efficient use of user and password by 
utilizing a single-sign-on feature. 
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8. With respect to claim 12, It is rejected for the same reasons as claim 1 1 above. 
In addition, Saito discloses at least one additional server software application running 
on the server computer operable for providing information services to a user and is 
operable for receiving the unique user identification from the server computer and 
authenticating the user via the unique identification when the user communicates with 
the additional server software application ([0104]). 

9. With respect to claims 15 and 16, Paya discloses wherein in the step of 
communicating the unique customer identification to the client and other servers the 
unique identification is not embedded in a cookie (abstract). 

1 0. With respect to claim 1 8, Paya discloses wherein the client software 
application does not store cookies (abstract). 

1 1 . Claims 3 and 6 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Paya in view of Malik and in further view of Saito as applied to claim 1 and 
in further view of Grantges, Jr. (US Patent 6,324,648 B1, hereinafter Grantges). 

12. With respect to claim 3, Paya and Malik discloses the claimed invention except 
that the method of claim 1 wherein in the step of communicating the entered user 
information to a first server the communication is compliant with a common gateway 
interface standard. 
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In the same field of endeavor, Grantges clearly discloses a web server 
communicates with the information collector using the well-known Gateway Interface 
(CGI), the specification for transferring information between a web server and CGI 
program (column 1, line 67, column 2, lines 1-3). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to incorporate the teachings of Paya, Malik, and Saito 
with the teachings of Grantges whom disclose using CGI interface to communicate 
information to a web server in order to interface external application software with an 
information server. One of ordinary skill would have been motivated to incorporate 
these references with one another since it allows the server to pass requests from a 
client web browser to the external application in a more efficient manner. 

13. With respect to claim 6, Paya and Malik discloses the claimed invention except 
wherein in the step of communicating the unique customer identification the 
communication complies with a common gateway interface standard. 

In the same field of endeavor, Grantges clearly discloses a web server 
communicates with the information collector using the well-known Gateway Interface 
(CGI), the specification for transferring information between a web server and CGI 
program (column 1, line 67, column 2, lines 1-3). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to incorporate the teachings of Paya, Malik, and Saito 
with the teachings of Grantges whom disclose using CGI interface to communicate 
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information to a web server in order to interface external application software with an 
information server. One of ordinary skill would have been motivated to incorporate 
these references with one another since it allows the server to pass requests from a 
client web browser to the external application in a more efficient manner. 

14. Claims 5 and 8 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Paya in view of Malik and in further view of Saito as applied to claim 1 in 
further view of Heimsoth et al. (US Patent 5,764,915, hereinafter Heimsoth). 

15. With respect to claim 5, Paya and Malik discloses the claimed invention except 
wherein in the step of communicating the entered user information a Berkeley System 
Distribution socket interface is used. 

In the same field of endeavor, Heimsoth clearly discloses the process which an 
application needs to access the TCP/IP protocol is a communications API layer such as 
a BSD sockets interface (column 13, lines 25-29). 

Paya, Malik, Saito, and Heimsoth are analogous art since they all disclose 
managing a communication session. Therefore, it would have been obvious to one of 
ordinary skill in the networking art at the time the invention was made to have 
incorporated Heimsoth teachings with the teachings of Paya and Malik, in order for 
information from an application to communicate to a TCP/IP protocol that is embedded 
in every server through BSD sockets [see Heimsoth, Col. 13, lines 25-29]. 
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16. With respect to claim 8, Paya and Malik discloses the claimed invention except 
wherein in the step of communicating the unique customer identification a Berkeley 
System Distribution socket interface is used. 

In the same field of endeavor, Heimsoth clearly discloses the process which an 
application needs to access the TCP/IP protocol is a communications API layer such as 
a BSD sockets interface (column 13, lines 25-29). 

Paya, Malik, Saito, and Heimsoth are analogous art since they all disclose 
managing a communication session. Therefore, it would have been obvious to one of 
ordinary skill in the networking art at the time the invention was made to have 
incorporated Heimsoth teachings with the teachings of Paya and Malik, in order for 
information from an application to communicate to a TCP/IP protocol that is 
embedded in every server through BSD sockets [see Heimsoth, Col. 13, lines 25-29]. 

17. Claims 4 and 7 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Paya in view of Malik and in further view of Saito as applied to claim 1 in 
view of Lerner (Pub # US 2002/0010776 A1, hereinafter Lerner). 

18. With respect to claim 4, Paya, Malik, and Saito discloses the claimed invention 
except wherein in the step of communicating the entered user information a JAVA 
servlet technology is used. 

In the same field of endeavor, Lerner clearly discloses that when any web 
application in the same central server domain name may be subsequently read the 



Application/Control Number: 10/805,170 Page 15 

Art Unit: 2457 

cookie when the browser is directed to a webpage, a CGI script or a java servlet located 
on that server, (paragraph 0037, lines 8-12). 

Paya, Malik, Saito, and Lerner are analogous art since they all disclose 
managing a communication session. Therefore, it would have been obvious to a person 
of ordinary skill in the art at the time the invention was made to incorporate the 
teachings of Paya, Malik, and Saito with the teachings of Lerner whom disclose that 
employing JAVA servlet technology would used for objects that dynamically process 
requests and construct responses. One of ordinary skill would have been motivated to 
incorporate these references with one another since it is much easier to add dynamic 
content to the Web server using the Java platform. 

1 9. With respect to claim 7, it is being rejected for the same reasons as claim 4 
above. 

20. Claims 14 and 17 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Paya in view of Malik and in further view of Saito as applied 
to claim 1 in further view of Fukuda et al., (US Pub# 2002/0184539 A1, 
hereinafter Fukuda). 

21 . With respect to claim 14, Paya, Malik, and Saito does not disclose the step of 
creating a unique customer identification for the user of the consumer device the step 
includes generating a random number. 
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In the same field of endeavor, Fukuda discloses the step of creating a unique 
identification for the user includes generating a random number ([0009], lines 1-10). 

Paya, Malik, Saito, and Fukuda are analogous art since they all disclose 
managing a communication session. Therefore, it would have been obvious to a person 
of ordinary skill in the art at the time the invention was made to incorporate the 
teachings of Paya, Malik, and Saito with the teachings of Fukuda whom disclose an 
order for an authentication key to possess a unique version of the program. One of 
ordinary skill in the art would have been motivated to incorporate these references with 
one another to allow generation of a specific two-dimensional code for highly accurate 
user authentication ([0008]). 

22. With respect to claim 17, Paya and Malik does not disclose the step of 
communicating user information to a first server from a client the user information 
includes a name, address and phone number. 

In the same field of endeavor, Fukuda discloses the step of communicating user 
information to a first server from a client the user information includes an address and a 
phone number ([0051], lines 1-9). 

Paya, Malik, Saito, and Fukuda are analogous art since they all disclose 
managing a communication session. Therefore, it would have been obvious to a person 
of ordinary skill in the art at the time the invention was made to modify the teachings of 
Paya, Malik, and Saito with the teachings of Fukuda whom disclose an order for an 
authentication key to possess a unique version of the program. One of ordinary skill in 
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the art would have been motivated to incorporate these references with one another in 
order to know who the authentication code belongs to and if they are registered users 
([0052]). 

23. Claims 19 and 20 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Paya in view of Malik and in further view of Saito as applied 
to claim 1 and in further view of Baker et al., (US Patent # 5,678,041, hereinafter 
Baker). 

24. With respect to claim 19, Paya, Malik, and Saito does not clearly disclose 
wherein the at least one additional server computer running is operably connected to 
the server computer through a business network. 

In the same field of endeavor, Baker discloses wherein the at least one additional 
server computer running is operably connected to the server computer through a 
business network (col. 1, lines 40-59). 

Paya, Malik, Saito, and Baker are analogous art since they all disclose managing 
a communication session. Therefore, it would have been obvious to a person of 
ordinary skill in the art at the time the invention was made to incorporate the teachings 
of Paya, Malik, and Saito with the teachings of Baker whom disclose connecting many 
different people on computers around the world. One of ordinary skill in the art would 
have been motivated to incorporate these references with one another in order to be 
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able to adapt to different types of client needs. 



25. With respect to claim 20, Paya, Malik, and Saito does not disclose further 
comprising a firewall between the one server computer and the client computer. 
In the same field of endeavor, Baker discloses further comprising a firewall 
between the one server computer and the client computer (col. 2, lines 1-16). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to modify the teachings of Paya, Malik, and Saito with 
the teachings of Baker in order to protect the computers on a local area network from 
being attacked by outsiders. 



Response to Arguments 



26. Applicant's arguments filed 02/24/2009, with respect to the rejection(s) of 
claim(s) 1-20 under have been fully considered and are persuasive. Therefore, the 
rejection has been withdrawn. However, upon further consideration, a new ground(s) 
of rejection is made. 



Conclusion 

27. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to HO SHIU whose telephone number is (571)270-3810. 
The examiner can normally be reached on Mon-Thur (8:30am - 4:00pm). 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ario Etienne can be reached on 571-272-4001 . The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



HTS /Ho Ting Shiu/ 

06/02/2009 Examiner, Art Unit 2457 



/ARIO ETIENNE/ 

Supervisory Patent Examiner, Art Unit 2457 



